Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 401
  • Last Modified:

Start/Restart Services Permissions

What are the minimum permissions I need to grant for a user to connect to a Windows 2003 Domain Controller using the services mmc console to start and/or restart services?
0
DVation191
Asked:
DVation191
  • 2
1 Solution
 
oBdACommented:
You first need to grant them the necessary permissions (read/start/stop/pause, RTOP in subinacl.exe), either through a group policy or through subinacl.exe
Check here for details:
How to grant users rights to manage services in Windows 2000
http://support.microsoft.com/kb/288129

Download details: SubInACL (SubInACL.exe)
http://www.microsoft.com/downloads/details.aspx?FamilyID=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B

In addition, you need the following for remote access:
Non-administrators cannot remotely access the Service Control Manager after you install Windows Server 2003 Service Pack 1
http://support.microsoft.com/kb/907460
0
 
DVation191Author Commented:
I have granted the appropriate permissions using SubInACL for the services themselves, but the user still cannot connect to the services using the mmc console remotely.

The last link you provided describes using sc.exe, but I want the user to be able to use the MMC console. Am I missing something?
0
 
oBdACommented:
You need to run the command described in the 907460 article *once* on the server that hosts the service(s) you want to grant remote access to.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now